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SECTION  I — ABSTRACT 

f 

This  paper  presents  precise  versions  of  some  *laws*  that  must  be  satisfied  by  computations  involving 
communicating  parallel  processes.  The  laws  take  the  form  of  stating  plausible  restrictions  on  the 
histories  of  computations  that  are  physically  realizable.  The  laws  are  very  general  in  that  they  are 
obeyed  by  parallel  processes  executing  on  a time  varying  number  of  distributed  physical  processors.  For 
example,  some  of  the  processors  might  be  in  orbiting  satellites.  The  laws  are  justified  by  appeal  to 
physical  intuition  and  are  to  be  regarded  as  falsifiable  assertions  about  the  kinds  of  computations  that 
occur  in  nature  rather  than  as  proved  theorems  in  mathematics.  The  laws  are  intended  to  be  used  to 
analyze  the  mechanisms  by  which  multiple  processes  can  communicate  to  work  effectively  together  to 
solve  difficult  problems. 

The  laws  presented  in  this  paper  are  intended  to  be  applied  to  the  design  and  analysis  of  systems 
consisting  of  large  numbers  of  physical  processors.  The  development  of  such  systems  is  becoming 
economical  because  of  rapid  progress  in  the  development  of  large  scale  integrated  circuits. 

We  generalize  the  usual  notion  of  the  history  of  a computation  as  a sequence  of  events  to  the  notion  of 
a partial  order  of  events.  Partial  orders  of  events  seem  better  suited  to  expressing  the  causality 
involved  in  parallel  computations  than  totally  ordered  sequences  of  events  obtained  by  'considering  all 
shuffles"  of  the  elementary  steps  of  the  various  parallel  processes I2L22J4  The  utility  of  partial  orders  is 
demonstrated  by  using  them  to  express  our  laws  for  distributed  computation.  These  laws  in  turn  can  be 
used  to  prove  the  usual  induction  rules  for  proving  properties  of  procedures.  They  can  also  be  used  to 
derive  the  continuity  criterion  for  graphs  of  functions  studied 
computation.  The  graph  of  a function  is  simply  the  set  of  all  input 
can  prove  that  the  graph  of  any  physically  realizable  procedure  p 
function  is  the  limit  of  a continuous  functional  F such  that 

graph(p)  = Ui<N  F'({)) 

In  other  words  the  graph  of  p is  the  limit  of  the  n-fold  compositions 
empty  graph. 


in  the  Scott-Strachey  model  of 
output  pairs  for  the  function^  We 
that  behaves  like  a mathematical 


of  F with  itself  beginning  with  the 
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SECTION  II  — INTRODUCTION 

In  programming  languages  such  as  SIMULA-67  [17],  SMALLTALK  [18],  and  CLU  [20],  the  emphasis 
has  changed  (compared  to  Algol-60)  from  that  of  procedures  acting  on  passive  data  to  that  of  active 
data  processing  messages.  The  actor  model  is  a formalization  of  these  ideas  that  is  independent  of  any 
particular  programming  language.  Instances  of  SIMULA  and  SMALLTALK  classes  and  CLU  clusters 
are  actors.  However,  actors  have  been  designed  to  include  the  added  effects  of  parallelism  so  that 
instances  of  monitors[42,4l],  envelopes[43],  and  serializers[34]  are  also  actors. 

The  actor  message  passing  theory  can  be  used  to  model  networks  of  communicating  processes  which 
may  be  as  close  together  as  on  the  same  LSI  chip  or  as  far  apart  as  on  different  planets.  It  can  be  used 
to  model  processes  which  communicate  via  shared  memory[12],  packet-switched  networks[13,24], 
ring-networks[23],  boolean  n-cube  networks[44],  or  Batcher  sorting  nets[25], 

SECTION  III  — ACTORS  and  EVENTS 

The  theory  presented  in  this  paper  attempts  to  characterize  the  behavior  of  procedural  objects  called 
actors  [active  objects]  in  parallel  processing  systems.  Actors  and  events  are  the  fundamental  concepts  in 
the  theory.  Actors  interact  with  each  other  through  one  actor  sending  a messenger  to  another  actor 
called  the  target.  The  arrival  of  a messenger  at  a target  is  an  event,  and  these  events  are  the  basic 
steps  in  this  model  of  computation.  A key  point  in  the  actor  model  of  computation  is  that  messengers 
are  themselves  actors.  The  actor  model  is  therefore  an  un-typed  theory  which  is  a generalization  of  the 
X-calculus  of  Church. 

Actors  can  be  created  by  another  actor  as  part  of  the  second  actor’s  behavior.  Indeed,  almost  every 
messenger  is  newly  created  before  being  sent  to  a target  actor. 

Events  mark  the  steps  in  actor  computations;  they  are  the  fundamental  interactions  of  actor  theory. 
Each  event  is  instantaneous  and  indivisible  taking  no  duration  in  time.  Every  event  E consists  of  the 
arrival  of  a messenger  actor,  called  massanger(E),  at  a target  actor,  called  targat(E). 

We  will  often  use  the  notation: 

Es  [T  M] 

to  indicate  that  E has  messenger  M and  target  T. 

The  time  of  an  event  is  the  arrival  of  the  messenger  of  the  event  rather  than  the  sending  of  the 
messenger  because  a messenger  cannot  affect  the  behavior  of  another  actor  until  that  actor  receives  it. 
If  the  sender  wishes  a reply,  an  actor  (called  the  continuation)  to  whom  any  reply  should  be  sent  should 
also  be  carried  by  (as  a component  of)  the  messenger. 

Intuitively,  the  arrival  of  the  messenger  M at  the  target  T makes  M’s  information  available  to  the  target 
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for  the  purpose  of  activating  additional  events.  The  arrival  of  M at  T does  not  in  itself  cause  any 
change  to  either  M or  T. 

For  each  event  E we  define  acquaintancesg(T)  and  acquaintancesgfM)  to  be  the  vector  of  immediate 
acquaintances  of  T and  M,  respectively.  The  immediate  acquaintances  of  an  actor  x are  the  other  actors 
x directly  "knows  about"  at  a given  instant.  The  relation  is  asymmetric  in  the  sense  that  it  is  possible 
for  an  actor  x to  know  about  an  actor  y without  it  being  the  case  that  y knows  about  x.  An  actor  may  or 
may  not  "know  about"  itself;  if  it  does,  it  can  directly  send  itself  messages’ 

Law  of  Finite  Acquaintances:  For  all  actors  x and  avants  E such  that  x is  tha  target  or  massangar  of  E, 
the  vector  acquaintancesg(x)  has  finite  length. 

The  above  law  states  that  an  object  can  only  be  directly  connected  to  finitely  many  other  objects. 

All  of  the  actors  which  are  definable  within  the  lambda  calculus  of  Church  have  the  property  that  their 
acquaintances  cannot  change  with  time;  i.e.  if  x is  defined  by  a lambda  expression,  then  for  all  events 
Ej  and  E2  in  which  x is  the  target  or  messenger,  it  will  be  the  case  that 

acquaintancosgi(x)  = acquaintances^*) 

In  order  to  implement  interprocess  communication  between  parallel  processors  it  is  necessary  to  use 
actors  whose  vector  of  acquaintances  changes  over  time.  The  purpose  of  this  paper  is  to  axiomatize  the 
fundamental  laws  which  govern  the  behavior  of  such  actors. 

An  important  example  of  an  actor  whose  immediate  acquaintances  change  with  time  is  a cell.  A cell  is 
an  actor  which  at  any  given  time  has  exactly  one  immediate  acquaintance--its  contents.  When  the  cell 
is  sent  a messenger  which  consists  of  the  messaee.  "what  is  your  contents?",  and  a continuation-another 
actor  which  will  receive  the  contents--the  cell  is  guaranteed  to  deliver  its  contents  to  that  continuation 
(while  also  continuing  to  remember  them).  All  this  might  be  very  boring  if  the  contents  of  the  cell  were 
constant.  However,  upon  arrival  of  a messenger  which  has  the  message  "update  your  contents  to  be  x" 
and  a continuation,  the  cell  is  guaranteed  to  update  its  contents  to  be  the  actor  x (whatever  that  may  be) 
and  inform  the  continuation  that  the  update  has  been  performed.  The  behavior  of  cells  will  be 
axiomatized  later  in  this  paper  after  we  have  presented  enough  of  the  actor  model  to  make  this 
possible 

The  targel(E)  and  the  mescenger(E)  and  their  immediate  acquaintances  will  be  called  (immediate) 
participants  of  an  event  E The  immediate  participants  of  an  event  are  exactly  those  actors  which  can 
be  accessed  without  sending  any  messages 

participants(E)  = {target(E),  messenger(E)}  U acquaintance*E(»arget(E))  U acquaint  ance*E(me**enger(E)) 
Finite  Interaction  Law:  For  each  event  E,  the  immediate  participants  in  E are  finite. 


The  above  law,  which  is  intended  to  capture  the  physical  intuition  that  only  finitely  many  objects  can 
interact  in  a single  event,  is  an  immediate  corollary  of  the  Law  of  Finite  Acquaintances. 
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SECTION  IV  — PARTIAL  ORDERINGS  on  EVENTS 

In  order  to  develop  a useful  model  of  parallel  computation,  we  have  found  it  desirable  to  generalize  the 
usual  notion  of  the  history  of  a computation  as  a sequence  of  events.  In  this  paper  a history  of  a 
computation  will  be  expressed  as  a partial  order  which  records  the  causal  and  incidental  relations 
between  events.  The  partial  orders  constrain  the  maximum  amount  of  parallelism  that  can  be  used  in 
an  implementation.  Any  two  events  which  are  unordered  can  be  executed  concurrently  using  separate 
processors.  However,  there  is  no  requirement  that  an  implementation  do  this.  Events  can  be  executed 
in  any  time  sequence  that  is  consistent  with  the  partial  order. 


I Vi  ACTIVATION  ORDERING 


One  important  strict  partial  ordering  on  events  in  the  history  of  a computation  is  derived  from  how 
events  activate  one  another.  Suppose  an  actor  xj  receives  a messenger  in  an  event  Ej  and  as  a 
result  sends  a messenger  to  another  actor  X2-  Then  the  event  E2,  which  is  the  arrival  of  the 
messenger  m2  at  x2.  is  said  to  be  activated  by  Ej.  We  call  the  transitive  closure  of  this  "activates" 
relation  the  activation  ordering  and  if  Ej  precedes  E2  in  this  ordering  then  we  write: 

Ej  -aet“>  E2 

In  general  -nct->  is  only  a partial  ordering  because  an  event  E might  activate  several  distinct  events 
Ej En,  thereby  causing  a "fork". 

IV  la  — Primitive  Actors 


Labeled  sequences  are  one  of  the  most  important  kinds  of  primitive  actors.  An  example  of  a labeled 
sequence  is  [real:  3,  imaginary:  x]  which  is  a sequence  with  two  acquaintances  3 and  x which  are  labeled 
real:  and  imaginary:  respectively.  We  allow  labeled  sequences  with  numerical  labels  to  be  abbreviated 
using  positional  notation  so  that  [Ir  3,  2:  y]  can  be  abbreviated  as  [3  y]. 


A simple  example  which  illustrates  the  use  of  -aei->  is  a computation  in  which  integers  3 and  4 are 
added  to  produce  7.  We  suppose  the  existence  of  a primitive  actor  called  ♦ which  takes  in  pairs  of 
numbers  and  produces  the  sum.  In  this  case  ♦ receives  a messenger  of  the  following  form: 

[rcquctl:  [3  4],  reply-to:  c] 

which  specifies  that  the  message  in  the  request  is  the  argument  tuple  [3  4]  and  the  reply  which  is  the 
sum  should  be  sent  to  the  continuation  e when  it  has  been  computed.  Thus  the  history  of  the 
computation  contains  two  events: 
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I:  a request  event  with  target  ♦ and  messenger  that  specifies  the  numbers  to  be  added  and 
an  actor  c to  which  the  sum  should  be  sent; 

2 a reply  event  with  target  c and  messenger  that  specifies  the  sum  of  the  numbers. 

These  two  events  are  related  as  follows  in  the  activation  ordering: 

£ + [request:  [3  4],  reply-to:  c]J 

I 

act 

I 

V 

[c  [reply:  7]]| 

The  activation  ordering  can  be  used  to  define  the  notion  of  a simple  primitive  actor  as  follows: 
Detinition:  An  actor  x will  be  said  to  be  a simple1  primitive  actor  if  whenever  an  event  Ej  of  the  form 

Ej:  lx  [requett:  m,  reply-to:  c]J 

appears  in  the  history  of  a computation  then  there  is  a unique  event  E2  of  the  form 

E2:  [c  <~~  [reply.  r]J 

such  that  Ej  -nn->  E2  and  there  are  no  events  E such  that  Ej  -oc«->  E -ae »->  E2-  Simple  primitive  actors 
are  one- in  one-out  procedures. 

Complaint  processing  can  easily  be  incorporated  into  the  scheme.  The  history  that  results  from 
divide[3  0]  which  attempts  to  divide  3 by  0 is  shown  below: 

[divide  <~~  [request:  [3  0],  reply-to:  c]J 

I 

act 

I 

V 

[c  <~~  [complaint:  [*ero-divide:  3]fl 

Since  complaint  processing  does  not  have  any  profound  implications  for  the  results  in  this  paper,  we 
will  not  say  anything  more  about  the  matter. 


1:  Later  in  this  paper  we  will  see  examples  of  primitive  actors  such  as  fork  and  join  primitives  which  are  not 
simple. 
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The  history  of  the  computation  of  <actorial[3]  using  an  iterative  implementation  of  factorial  illustrates 
how  the  activation  ordering  can  be  used  to ' illustrate  properties  of  control  structures.  We  will  suppose 
that  factorial  knows  about  an  actor  called  loop  which  is  sent  tuples  of  the  form  [index  product]  where  the 
initial  index  is  3 and  the  initial  product  is  1.  Whenever  loop  receives  a tuple  [index  product],  where  index 
is  not  1.  then  it  sends  itself  the  tuple  [(index  - 1)  (index  * product)]. 

[ factorial  <~~  [requiem:  [3],  rcply-to:  c]J 

I 

act 

I 

V 

[loop  [re7ue.1i:  [3  1],  rcply-to:  c]]| 

I 

act 

I 

V 

[loop  [rcrjuctl:  [2  3],  rcply-to:  c]J 

I 

act 

I 

V 

[loop  [re7ue.1i:  [1  6],  rcply-10:  c]]] 

I 

act 

I 

V 

[c  <~~  [reply:  6]J 

The  actor  loop  is  iterative  because  it  only  requires  the  amount  of  working  store^  needed  to  store  the 
index  and  product.  Note  that  only  one  reply  is  sent  to  the  continuation  c even  though  c appears  as  the 
continuation  in  several  request  events. 


IV  l b — Laws  for  the  Activation  Ordering 

It  is  not  possible  for  there  to  be  an  infinite  number  of  events  in  a chain'*  of  activation  between  two 
given  events  in  the  activation  ordering  of  the  history  of  a computation.  This  law  implies  the  existence 
of  primitive  actors.  Stated  more  formally, 

Law  of  Finite  Activation  Chains  between  two  Events;  If  C ic  a chain  of  ovonts  in  the  activation  ordering  from 
E j to  E 2 , then  C is  finite. 


2:  The  careful  treatment  of  the  storage  required  for  this  example  is  given  in  [26]. 
3 A chain  is  a totally  ordered  sequence  of  events 
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The  law  of  finite  activation  chains  between  events  is  intended  to  express  the  fact  that  "Zeno 
machines"-i.e.  machines  which  compute  infinitely  fast--cannot  be  physically  constructed.  For  example, 
consider  a computer  with  your  favorite  instruction  set  which  executes  its  first  instruction  in  1 
microsecond,  its  second  in  1/2  microsecond,  its  third  in  1/4  microsecond,  and  so  on.  This  machine  not 
only  could  compute  everything  normally  computable  in  less  than  2 microseconds,  but  could  also  solve  the 
"halting  problem"  It  could  do  this  by  simulating  a normal  computer  running  on  some  input,  and  if  the 
simulation  were  still  running  after  2 microseconds,  it  could  conclude  that  the  simulated  machine  does 
not  halt  on  that  input. 

Intuitively  each  event  can  directly  activate  only  a finite  number  of  other  events.  The  events  directly 
activated  by  an  event  E are  called  immediate  successors  of  E (under  the  activation  ordering  -ac i->).  The 
immediate  successor  set  of  E in  the  -aci->  ordering,  written  immadiaU-succ.^.^E),  can  be  defined 
formally: 


immediate-succ_nr,_>(E)  s {Ej|  E -ac t->  Ej  and  ->3  E2  such  that  E -act->  E2  -act->  El> 

Then  we  have  the  following  law: 

Law  of  Finite  Immediate  Successors  in  the  Activation  Ordering: 

For  all  avonts  E,  th«  set  immediate'Succ.art.>(E)  is  finite. 

We  define  immediate  predecessors  in  the  activation  ordering  in  a manner  similar  to  that  used  for 
immediate  successors  We  postulate  that  an  event  is  either  an  initial  event,  in  which  case  it  has  no 
predecessors,  or  it  is  activated  by  a unique  predecessor  event. 

Law  of  Uniqueness  of  Immediate  Predecessors  in  the  Activation  Ordering: 

For  all  events  E,  the  set  immediate-pred.nr|.>(E)  has  at  most  one  element 

This  law  is  based  on  the  physical  intuition  that  two  distinct  events  cannot  both  be  the  immediate  cause 
of  another  event.  This  is  because  an  event  which  immediately  activates  another  event  must  have  been 
the  sender  of  the  messenger  for  that  second  event.  Thus  each  event  E has  at  most  one  activator^ 
which  if  it  exists  will  be  denoted  as  activator(E). 

Note  that  the  activation  ordering  analyzes  the  causality  of  the  classical  "fork-join”  structure  of  parallel 
computations  in  an  asymmetric  manner.  The  reason  is  that  the  last  event  to  arrive  at  the  join  is  the  one 
which  activates  the  remainder  of  the  computation.  Later  in  this  paper  we  will  introduce  another  partial 
order  on  events  [called  the  continuation  order]  which  treats  "fork-join"  control  structures  in  a symmetric 
fashion. 


4:  This  usage  of  the  term  "activator"  is  somewhat  in  conflict  with  the  usage  of  the  term  in  Greif  and 
Hewitt[40J  The  usage  here  has  the  advantage  that  it  is  more  firmly  grounded  in  the  physics  of 
computation. 
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IV2  - ARRIVAL  ORDERINGS 


Intuitively,  the  activation  ordering  can  be  identified  with  "causality"  in  which  each  event  is  "caused"  by 
its  activator.  However,  the  activation  ordering  is  not  enough  to  specify  the  actions  of  actors  with 
"side-effects",  such  as  cells.  For  this  reason,  we  introduce  the  arrival  ordering  -nrr->x  for  an  actor  x 
whose  behavior  depends  on  the  order  of  arrival  of  the  messengers  sent  to  x.  The  physical  basis  for 
defining  the  order  of  arrival  is  a hardware  device  called  an  arbiter.  Note  that  there  are  only  a few 
primitive  actors  such  as  cells  and  synchronization  primitives  whose  behavior  actually  depends  on  the 
order  in  which  messengers  arrive.  Such  actors  are  called  order  dependent.  All  other  actors  are  order 
independent  and  do  not  need  to  use  an  arbiter  since  they  can  be  freely  copied  to  make  as  many 
instances  as  desired. 

Due  to  the  totality  of  the  order  of  arrival  of  messengers  at  an  order  dependent  actor  x (which  will  be 
discussed  in  more  detail  below),  the  notion  of  a "local  time"  for  x is  well-defined.  Therefore,  when 
talking  about  a single  actor,  we  can  talk  rigorously  about  the  changes  in  its  vector  of  acquaintances  over 
time 


IV  2a  — Laws  for  Arrival  Orderings 

The  arrival  ordering  for  each  order  dependent  actor  x is  required  to  be  a total  ordering  on  all  events 
which  have  x as  their  target  This  policy  is  enforced  by  arbitration  in  actors  such  as  synchronization 
primitives  which  need  to  observe  the  order  in  which  their  messages  arrive. 

Arrival  Ordering  Law;  If  Ej*E2  and  target(Ej)=target(E2)=x, 
then  either  E^  ~arr->%  E2  or  E2  -arr->x  Ej 

This  law  says  that  the  messenger  of  Ej  arrives  at  x before  the  messenger  of  E2  or  vice-versa  The 
arrival  ordering  is  defined  by  the  arbiter  for  x. 

Note  in  connection  with  arrival  orderings  that  there  is  no  necessary  relation  between  the  arrivals  of  two 
messengers  at  a target  and  the  ordering  of  their  activator  events.  Suppose  that  events  Ej  and  E2  have 
the  same  target  x Then,  in  general,  the  circumstance  that  Ej  -nrr->x  E2  does  not  imply  that 
Ej  *nri->  E2  since  Ej  and  E2  might  be  distinct  events  of  two  asynchronous  processes  that  both  happen 
to  send  messengers  to  the  same  actor.  Furthermore,  the  fact  that  activator(Ej)  -aci->  activator(E2)  is  no 
guarantee  that  Ej  -orr->x  E2;  ie.  the  messenger  of  E2  might  still  arrive  at  the  target  actor  before  the 
messenger  of  Ej 

Each  actor  is  created  at  some  point  in  time.  This  fact  is  embodied  in  the  following  law: 

Law  of  Finite  Predecessors  in  an  arrival  ordering: 

For  all  events  E’ 

{ E|  E -'J'-r->target(E.j  E’}  is  finite. 
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Given  an  event  E^  of  the  form  |[T  Mj]l  and  an  event  E2  of  the  form  J[T  M2J,  there  are  only  a 
finite  number  of  events  between  these  two  events  in  the  arrival  ordering  -orr->y.  Stated  more  formally: 

Corollary;  Law  of  Finite  Chains  between  two  Events  in  an  Arrival  Ordering: 

For  all  events  E^  and  E2  such  that  target(E^)  = target^)  = x, 

{E|  Ej  -nrr->x  E -nrr->x  E2}  is  finite. 

The  above  law  implies  that  anomalous  behavior  like  the  following  is  not  physicaly  realizable:  a cell 
receives  the  infinite  sequence  of  "store"  messages:  [*iorc:  1],  [*iore:  1/2],  [*iore:  1/4],  [*iore:  1/8],  etc.  and 
then  receiving  a "contents?"  message.  What  is  it  to  reply?  Zero?  But  zero  was  never  explicitly  stored 
into  the  cell! 

The  law  of  Finite  Chains  in  the  Arrival  Ordering  allows  us  to  define  immediate  predecessors  and 
immediate  successors  for  the  arrival  ordering  in  a manner  similar  .0  the  one  used  for  the  activation 
ordering.  It  guarantee  that  the  arrival  ordering  for  each  actor  is  total  over  its  domain,  successors  and 
predecessors  are  unique  when  they  exist.  If  an  event  E has  an  immediate  predecessor  in  -arr->target(E) 
then  it  will  be  called  the  precursor  of  E and  will  be  denoted  by  precursor(E).  The  law  guarantees  that 
the  process  of  repeatedly  taking  the  precursor  of  an  event  with  target  t will  find  the  creation  event  for  t 
in  a finite  number  of  steps. 


SECTION  V — CREATION  of  ACTORS 

The  actor  message  passing  model  differs  from  most  other  theories  of  computation  in  that  it  explicitly 
deals  with  the  issues  involved  in  creating  new  objects. 

Intuitively  the  creation  of  an  actor  x must  precede  any  use  of  x.  In  order  to  precisely  state  the  above 
intuition  as  a law  we  must  be  more  precise  about  when  actors  are  created.  For  each  actor  x which  is 
created  in  the  course  of  a computation,  we  shall  require  that  there  is  a unique  event  creation(x)  which 

caused  x to  be  created. 

Let  created(E)  be  the  set  (possibly  empty)  of  actors  created  by  the  event  E--i.e.  the  set  of  actors  which 
claim  E as  their  creation  event.  Note  that  x is  not  a participant  in  croation(x)  because  x does  not  come 
into  existence  until  after  creation(x)  has  occurred. 

Definition:  created(E)  = {x|  craation(x)=E} 

The  intuition  that  a single  event  can  only  create  finitely  many  objects  is  formalized  as  follows: 

Law  of  Finite  Creation:  For  oach  •vant  E,  crcaUd(E)  is  finite. 

Note  that  the  elements  of  created(E)  might  be  mutual  acquaintances  of  one  another  and  that  mutually 
recursive  procedures  can  be  created  in  this  way. 
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SECTION  VI  — CELLS 


VI. 1 — Axiom  for  Cells 

The  axiom  for  cells  has  two  parts:  involving  their  creation  and  use  which  can  be  stated  as  follows: 

Creation:  There  is  a simple  primitive  actor,  called  create-celi,  such  that 
whenever  it  is  sent  a tuple  of  the  form  [i],  it  creates  an  actor  e which  is  a new 
storage  cell  with  initial  contents  the  actor  i.  More  formally,  for  each  event  E^ 
of  the  form  Ej:  [[creata-cell  <~~  [request:  [i],  rcply-to:  c]J  there  is  a unique 
event  E2  of  the  form  E2:  |[c  [reply:  s]]]  such  that  s is  a newly  created 
simple  primitive  actor  and  Ej  = activator (E2).  Furthermore  craatedtE})  = {s} 
which  says  that  the  only  actor  created  by  the  event  Ej  is  the  storage  cell  s. 

Thus  each  storage  cell  that  is  returned  by  craate-cell  differs  from  all  previously 
created  cells.  The  storage  cell  s always  has  exactly  one  acquaintance  which  is 
initially  i.  If  E is  an  event  which  has  s as  its  target,  we  will  use  the  notation 
contentsE(s)  to  denote  this  acquaintance  at  the  time  of  the  event  E. 

Use:  A storage  cell  s can  only  be  sent  messages  of  the  form  [contents?]  which 
requests  the  "current"  contents  and  [update:  x]  which  updates  the  contents  to  be 
x. 

The  contents  of  s when  it  receives  one  of  these  messages  in  an  event  E can  be 
axiomatized  using  the  arrival  ordering  for  c as  follows: 

contentsE(s)  = 

if  E has  an  immediate  predecessor  in  the  arrival  ordering  for  s 
then 

if  precursor(E)  is  of  the  form  [s  <«"*  [request:  [update:  x],  reply-lo:  ...]]] 
then  x 

else  e°nten1sprecursor(E)(s) 

else  i which  is  the  actor  sent  to  creat«-cell  to  create  S 

If  E is  an  event  of  the  form  [[s  [request:  [contents?]  reply-to:  c]J  then  there 

is  a unique  event  E’  of  the  form  E’:  [c  <<*•'  [reply:  cont«ntsE(s)]]|  such  that 
E = activator(E’). 
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VI.2  — Busy  Waiting 

Busy  waiting  is  the  kind  of  waiting  used  in  some  multi-processing  systems.  In  this  kind  of  waiting,  the 
contents  of  a cell  is  continually  checked  and,  if  it  is  unchanged,  the  processor  branches  back  to  check  it 
again  This  kind  of  waiting  is  used  when  one  processor  cannot  depend  upon  another  to  "wake  it  up" 
when  the  contents  change.  Busy  waiting  depends  upon  the  property  of  Finite  Chains  between  Events  in 
the  arrival  orderings  of  cells. 

For  example  suppose  that  a new  storage  cell  s is  created  whose  initial  contents  are  0.  Furthermore 
suppose  that  the  contents  of  s are  updated  exactly  once  by  a process  which  sends  s the  message 
[update:  l]  Now  another  process  might  busy  wait  until  the  contents  of  the  cell  c change  to  1 by 
executing  a procedure  of  the  following  form: 

loop:  if  contents(s)  = 0 

then  goto  loop 
rise  ...proceed... 

The  property  of  Finite  Chains  between  Events  in  the  arrival  ordering  for  s,  guarantees  that  the  code 
proceed  will  eventually  be  executed  since  otherwise  there  would  be  an  infinite  number  of  "contents?" 
messages  before  the  [tipdmr:  1]  message  in  the  arrival  ordering  of  s. 

The  use  of  the  arrival  ordering  in  the  actor  model  of  computation  seems  to  help  overcome  one  of  the 
major  limitations  of  other  theories  of  the  semantics  of  communicating  parallel  processes  based  on  the 
Scott-Strachey  model  of  computation  [5,6].  The  Scott-Strachey  model  is  a deep  mathematical  study  of 
functions  that  are  minimal  fixed  points  of  "continuous"  functionals.  As  currently  developed  the 
Scott-Strachey  model  seems  to  be  a special  case  of  the  actor  model  in  that  it  only  deals  with  actors  which 
behave  like  mathematical  functions  to  the  exclusion  of  actors  such  as  cells  and  synchronization 
primitives  whose  behavior  depends  on  the  arrival  ordering  of  messages  sent  to  the  actor. 


SECTION  VII  — LAWS  of  LOCALITY 

We  would  like  to  formalize  the  physical  intuition  that  computation  is  local  and  there  can  be  no  "action 
at  a distance"  The  laws  of  locality  presented  in  this  section  are  intended  to  capture  these  intuitions. 

The  initial  acquaintances  of  an  actor  are  a subset  of  the  participants  in  its  creation  event  and  the  actors 
created  by  its  creation  event: 

Initial  Acquaintances  Law:  It  an  actor  z is  the  target  ot  an  event  E 
such  that  E is  the  first  event  in  the  arrival  ordering  of  z then, 

acquaintances^)  c participants(creation(z))  U created(creation(z)) 

The  acquaintances  of  an  actor  can  increase  over  its  previous  acquaintances  only  by  the  acquaintances  of 
the  messengers  which  it  receives  and  the  actors  which  it  creates. 
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Precursor  Acquaintances  Law:  It  an  actor  z is  the  target  of  an  event  E 
such  that  E has  a precursor  in  the  arrival  ordering  of  z then, 

acquaintances^)  C participantstprecursor(E))  U created(precursor(E)) 

An  actor  x can  only  be  the  target  or  messenger  in  an  event  E if  x is  newly  created  or  is  an  immediate 
participant  in  activator(E). 

Activator  Acquaintances  Law:  For  each  event  E which  is  not  an  initial  event 
target(E)  i participantstactivator(E))  U createdtactivator(E)) 
messenger(E)  ( participants(activator(E))  U created(activator(E)) 

These  laws  of  locality  can  be  used  as  the  foundation  on  which  to  build  theories  of  information  flow  in 
computer  systems.  Using  the  formalism,  a theory  can  be  developed  to  show  how  the  imposition  of 
initial  constraints  can  be  used  to  eliminate  undesirable  information  paths.  In  this  way,  protection 
problems,  such  as  the  Confinement  Problem  may  be  solved.  The  actor  message  passing  model  can  be 
used  as  the  foundation  for  formalisms  (such  as  Strong  Dependency  [45])  for  describing  information 
transmission  in  computational  systems  and  for  proving  that  information  is  not  transmitted  over  certain 
paths. 


SECTION  VIII  — COMBINED  ORDERING 

To  make  sense  out  of  the  activation  and  arrival  orderings,  and  to  relate  them  to  a notion  of  "time",  we 
introduce  the  precedes  relation 

Def inition:  — > is  a binary  relation  on  events  which  is  the  transitive  closure  of  the  union  of  the 
activation  ordering  ■««•>  and  the  arrival  orderings  -orr->x  for  every  actor  x. 

In  order  for  — > to  function  as  a notion  of  precedence,  we  require  that  the  activation  and  arrival 
orderings  be  consistent  This  is  guaranteed  by  the  Law  of  Strict  Causality  for  actor  systems  which 
states  that  there  are  no  cycles  allowed  in  causal  chains;  i.e.  it  is  never  the  case  that  there  is  an  event  E in 
the  history  of  an  actor  system  which  precedes  itself.  Stated  more  formally  the  law  of  causality  is  that 
the  combined  ordering  is  also  a strict  partial  ordering: 

Law  of  Strict  Causality:  For  no  ovont  E does  E — > E. 


Suppose  that  we  have  events  in  a computation  described  as  follows: 
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El:  [*  rrij]] 

E2t  Cy  <~~  rn2]l 
E3:  IE y < — m3 J 
E4:  |[x  <~~  m4]] 

Ej  -ort->  E2  ;arrival  of  m^  at  x causes  the  arrival  of  m2  at  y 
E2  -nrr->  E3  ;m2  arrives  at  y before  m3 
E3  -nn->  E4  ;arrival  of  m3  at  y causes  the  arrival  of  m^  at  x 
E4  -nrr->x  Ej  ;m4  arrives  at  x before  mj 

The  Law  of  Strict  Causality  states  that  the  history  of  the  computation  given  above  is  physically 
impossible  to  realize  even  though  it  is  locally  reasonable  in  the  sense  that  any  proper  subset  of  the 
orderings  can  be  realized.  The  above  example  of  an  impossible  computation  is  due  to  Guy  Steele. 

Now  we  can  define  immediate  predecessors  and  successors  of  an  event  E under  -->.  Note  that  an  event 
E of  the  form  [[t  <~~  has  at  most  two  immediate  predecessors  in  the  relation  -->  one  of  which  is  the 
activator  of  E and  the  other  is  the  precursor  of  E in  the  arrival  ordering  -arr->j. 

We  would  like  to  formalize  the  intuition,  that  between  any  two  events  which  are  causally  related,  that 
there  are  only  finitely  many  events  in  a causal  chain  that  connects  the  events.  This  intuition  is 
formalized  in  the  following  law: 

The  Law  of  Finite  Chains  between  events  in  the  Combined  Ordering;** 

There  are  no  infinite  chains  of  events  between  two  events  in  the  strict  partial  ordering  — >. 

Actually  we  can  express  a much  stronger  property  about  the  activity  that  can  occur  between  two  events: 

Corollary:  Law  of  Finitely  Many  Events  between  two  events  in  the  Combined  Ordering: 

For  all  event  Ej  and  E2  the  set  {E|  Ej  — > E — > E2}  is  finite. 

The  above  law  is  easily  proved  using  Konig’s  Infinity  Lemma  and  the  law  that  there  are  no  infinite 
chains  between  two  events.  Note  that  the  Law  of  Finite  Chains  between  two  Events  in  the  Activation 
Ordering  and  any  Arrival  Ordering  are  immediate  corollaries  of  the  above  law. 

The  above  law  has  important  consequences  for  models  of  actor  systems.  It  implies  that  for  each  history 
of  a computation  that  there  exist  "time"  functions  that  map  events  onto  integers.  In  general  there  are 
many  time  functions  that  correspond  to  one  history  which  are  obtained  by  considering  all  the  possible 
total  orders  that  observers  might  see.  Such  time  functions  have  the  following  properties: 


5:  This  law  is  a strict  generalization  of  the  other  laws  in  this  paper.  We  originally  conjectured  that  it  could  be 
proved  using  the  Laws  of  Locality  together  with  the  rest  of  the  laws.  However  Will  Clinger  [47]  found  e 
counterexample.  Subsequently  Valdis  Berzins  [48]  independently  found  e very  beautiful  symmetric  form  of  the 
counterexample  as  the  solution  to  a class  exercise  in  MIT  class  6.835. 
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VEj  E2  if  Ej  — > E2  then  time(Ej)  < time^) 

VEj  E2  if  time(Ej)=time(E2)  then  E^=E2 

We  can  use  the  combined  ordering  -->  to  express  an  important  law  about  created  actors. 


Law  of  Creation  before  Use; 

If  an  actor  x is  created  in  the  course  of  a computation  and  E is  an  event  with  participant  x then 
creation(x)  ~ > E 


Villi  — NESTED  ACTIVITIES 


Since  one  of  the  aims  of  actor  theory  is  to  study  patterns  of  passing  messages,  we  must  identify  several 
common  patterns.  The  two  most  common  types  of  messengers  are  requests  and  replies  to  requests.  A 
request  has  two  acquaintances:  the  request  message  itself,  and  a continuation  actor  which  is  to  receive 
the  reply  A reply  to  a request  consists  of  a message  sent  to  the  continuation;  this  reply  usually  contains 
an  answer  to  the  request,  but  may  contain  a complaint  or  excuse  for  why  an  answer  is  not  forthcoming. 

We  define  the  nested  activity  corresponding  to  a request  event  RQ  in  a computation  to  be  the  set  of 
events  which  follow  RQ  in  the  combined  order  but  precede  any  reply  RP  to  the  request.  More  formally, 
let  E — > denote  the  set  of  events  which  follow  E (including  E itself)  and  — £E  denote  the  set  of  events 
which  precede  E (including  E)  in  the  computation.  In  other  words 

E~>  = {E’|  E=E'  or  E — > E'J 

”>E  = {E’|  E=E'  or  E'  — > E} 


Definition: 

If  an  event  E is  of  the  form  £ ...  [requett:  ...,  reply-to:  c]J  then  any  event  E'  of  the  form 
£c  <~~  [rr/»/y:  ...]]j  such  that  C ~aet~>  E’  will  be  said  to  be  a reply  to  E. 

We  can  now  define  an  activity  to  be  a set  of  events  as  follows: 

activity(RQ)  = RQ-->  fl  U{~*RP  | RP  is  a reply  to  RQ} 

Activities  embody  the  notion  of  the  nesting  of  activities  that  is  produced  by  conventional  programming 
languages,  since  we  only  include  those  events  in  an  activity  which  contribute  to  a reply  to  that  request. 
Note  that  if  no  reply  is  ever  made  to  the  request  RQ  in  the  computation,  then  the  activity  corresponding 
to  RQ  is  incomplete  and  therefore  vacuous. 

If  we  let  concurrent  activities  be  those  whose  request  events  are  unordered,  then  concurrent  activities  may 
overlap-i  e.  share  some  events.  However,  this  can  only  happen  if  the  activities  involve  some  shared 
actor  which  is  called  upon  by  both;  if  two  concurrent  activities  involve  only  "pure"  actors  which  by 
definition  have  no  arrival  ordering  and  can  be  freely  copied  to  avoid  arbitration  bottlenecks,  then 
activities  are  properly  nested,  meaning  that  two  activities  are  either  disjoint,  or  one  is  a subset  of  the 
other. 
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The  notion  of  activities  allows  one  to  vary  the  level  of  detail  in  using  actors  to  model  a real  system.  Let 
us  define  a primitive  activity  as  the  activity  of  a request  which  activates  exactly  one  immediate  reply, 
with  no  events  intervening.  Thus,  a primitive  activity  always  consists  of  exactly  two  events.  A crude 
model  for  a system  might  represent  an  actor  as  primitive,  i.e.  one  whose  receipt  events  are  all  primitive. 
However,  at  a finer  level  of  detail,  one  might  model  the  internal  workings  of  the  actor  as  an  activity  in 
which  a group  of  "sub”-actors  participate. 


SECTION  IX  — CONTINUATION  ORDERING 

The  notion  of  nested  activities  can  be  used  to  help  explicate  several  of  the  various  notions  of  "process" 
that  have  been  used  in  computer  science.  In  particular  it  can  be  used  to  define  an  ordering  on  events 
that  is  important  to  defining  the  semantics  of  programming  languages  for  parallel  processing.  This 
new  ordering  is  the  continuation  order  and  will  be  denoted  by  -coni->.  The  continuation  ordering  is 
important  because  it  captures  the  usual  operating  system  notion  of  "process"  in  terms  of  partial  orders 
on  events.  Later  in  this  paper  we  will  show  how  to  use  the  continuation  ordering  to  provide  a precise 
characterization  of  the  relationship  between  the  Scott-Strachey  model  and  the  actor  message-passing 
model. 

Definition:  If  E and  E’  are  events  then  E -eoni->  E’  if 
1:  There  is  some  activity  a such  that  E,  E’  ( a 
and 

2:  E -->  E’ 

Note  that  each  event  has  only  finitely  many  predecessors  and  finitely  many  immediate  successors  in  the 
continuation  ordering  because  -com->  is  a sub-ordering  of 


IX. 1 — Fork-Join  Behavior 


In  programming  languages  for  parallel  processing,  it  is  quite  common  to  provide  primitives  by  which 
processing  can  "fork"  creating  more  parallelism  which  can  later  join  together.  Parallel  evaluation  of  the 
arguments  of  a procedure  provides  a good  example  of  fork-join  behavior.  All  fork-join  primitives  have 
basically  the  same  structure.  Consider  for  example,  the  behavior  of  a procedure  f which  computes 
(x2  ♦ y2)  given  arguments  x and  y.  Below  are  the  two  possible  histories  for  an  activity  of  f which 
produces  these  results  where  -->  is  used  for  the  combined  ordering: 
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Ei:  [<  <~~  [request:  [x  y],  re  ply- to:  c]]] 

I I 

■act — act 


E-2:  It*  <“"v  [x  x],  replyto:  Cj]J 

I 

act 

I 

V 

E^:  Ccl  {reply:  x2]J 


E3:  [*  <~~  [request:  [y  y],  rcply-10:  c2]]| 


E5s  £c2  < — [reply.  y2]J 


I I 

V v ^ 

Eg:  [[  + <~~  [request:  { x 2 y2],  reply-to:  c]J 


E7:  [c  <»“  [reply,  (x2  ♦ y2)]] 

Note  that  in  the  history  given  above  that  Eg  Eg  whereas  in  the  history  given  below  that 

E^  -art->  Eg. 

EjS  [f  <~~  [rcquett:  fx  y],  re  ply  to:  c]]| 


E2:  <~~  [re7aext:  [x  x],  replyto:  «ifl 


E^S  (tcj  <~~  [reply:  x2]J 


E3:  [*  <~~  [re7uexl;  [y  y],  replyto:  C20 


Eg:  [c2  <~~  [reply.  y2]J 


I I 

V V 

Eg:  £+<~~  [re7ues<:  [x2  y2),  replyto:  c]J 

I 

act 

I 

V 

E7:  [e  <~~  [reply,  (x2  ♦ y2)]J 
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We  shall  say  that  E^  is  a fork  event  and  that  Eg  is  a join  event.  In  the  above  computation  it  will 
necessarily  be  the  case  that  Ej  -nn->  Eg  since  this  is  the  only  way  that  Eg  can  be  activated.  Therefore  it 
will  be  the  case  that  either  E4  -art->  Eg  or  Eg  -eci->  Eg.  The  continuation  ordering  -rom->  enables  us 
to  present  the  history  of  the  computation  without  having  to  be  concerned  as  to  ’inch  of  the  above 
possibilities  actually  occured.  Using  the  continuation  ordering  the  symmetry  of  the  above  fork-join 
computation  is  demonstrated  by  the  fact  that  the  continuation  ordering  is  the  same  for  both  of  the 
above  histories: 


Ej!  £f  <~~  [requett:  [x  y],  reply-to:  c]J 

II 

-cont cont 


I 

V 

E-2:  C*  [requett:  [x  x],  reply-to: 

I 

cont 


Es»  [*  [requett:  [y  yj,  reply-to:  C2O 

I 

cont 


E4:  [f  Cj  [reply:  x^]J 

I 

cont 


E5:  [C2  [reply.  y2]]| 


-cont- 


I I 

V V 

E6:  |[+  <~~  [requett:  [x^  y^J,  reply-to:  c]J 

I 

cont 

I 

V 

E7:  [c  <~~  [reply,  (x^  + y^)fl 


1X.2  — Synchronization  Between  Processes 

The  behavior  of  semaphores  provides  a simple  example  to  illustrate  the  relationship  be; ween  the 
activation  and  continuation  orderings.  Suppose  that  s is  a newly  created  semaphore  whose  capacity 
(count)  is  initially  0 so  that  the  first  attempt  to  perform  a P operation  will  wait  until  a V operation  is 
pei  formed  on  the  semaphore.  In  order  to  model  the  behavior  of  semaphores  using  message  passing,  we 
will  suppose  that  P and  V operations  are  implemented  by  sending  [P:]  and  [lf;J  requests  respectively. 
Suppose  that  Ep  is  the  first  event  in  the  arrival  ordering  of  c in  which  • receives  a [P:]  request  and  Ev 
is  the  next  event  in  which  s receives  a [I':]  request.  The  activation  and  continuation  relations  between 
these  events  is  shown  below: 
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Ep!  |£s  <~~  [ request : [P:],  reply-to:  Cj]]] 

I 

cont 

I 

V 

E:  <~~  [reply:  <-3ct-  Ey:  [a  <*•  [request:  [F:],  rcply-to:  c 2 ]]I 

I 

cont 

I 

V 

1*2  [reply:  ...Jj 


Note  that  Ev  — > E since  Ev  -act->  E but  it  is  not  the  case  that  Ev  -con«->  E because  there  is  no  activity  in 
which  they  are  both  elements. 


SECTION  X — PROCEDURES 


X.I  — Behavior  of  Procedures 

In  this  section  we  would  like  to  characterize  the  behaviors  of  actors  which  behave  like  procedures.  In 
order  to  do  this  we  would  like  to  use  the  notion  of  an  activity. 

To  make  our  discussion  more  concrete  we  will  consider  the  behavior  of  an  implementation  of  the 
Fibonacci  function  defined  as  follows: 

(fib  n)  = 

<«y 

(n  = 1 ) then  1 
(n  = 2)  then  1 

(n  > 2)  then  ((fib  (n  - 1))  ♦ (fib  (n  - 2)))) 

The  following  history  is  a partial  order  of  some  of  the  events  that  might  result  from  evaluating  (fib  4). 
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Ej:  |[ fib  [. request : [4],  reply-to:  c]]J 

I I 
I I 

-cont cont 


I 

V 

E2:  B>b  <~~  [request:  [3],  reply-to:  Cifl 

I 

cont 


E4:  <~~  [reply:  2]J 

I 


I 

V 

E3:  £fib  [request:  [2],  reply-to:  c2]3| 

I 

cont 

I 

V 

Eg:  £c2  [reply:  1]]] 

I 


cont- 


-cont- 


I I 

V V 

Eg:  [ + <~~  [request:  [2  1],  reply-to:  c]J 

I 

cont 

I 

V 

E7:  Ce  [reply:  3)J 

We  will  use  the  notation  {|(p  <=  m)  — > y|}  to  partially  describe  an  activity  which  starts  with  an  event  of 
the  form  [[p  [request:  m,  reply-to:  c]]J  and  finishes  with  an  event  of  the  form  |[c  [reply:  y]J 


All  of  the  events  shown  in  the  above  diagram  are  contained  in  one  activity  (which  we  will  name  a)  of 
fib  whose  starting  event  is  Ej  and  whose  finishing  event  is  E7.  Thus  the  activity  a is  of  the  form 
(|(fib  <=  [4])  — > 3|).  The  diagram  above  shows  two  sub-activities  of  a which  we  will  call  0 and  y such 
that  the  following  relationships  hold. 


0:  {|«ib  <=  3)  — > 2\)  start (0)  = E2  finish#)  = E4 

y:  {|(fib  <=  2)  -- > 1|}  start(-y)  = E3  finish^)  = Eg 


The  activity  0 has  events  which  are  not  shown  in  the  above  diagram.  Some  of  these  events  are  shown 
in  the  diagram  below: 
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E2:  [[fib  <~~  [rcqu.cH:  [3],  reply-to:  e j]] 


cont 


cont 


V 

Eg:  ([fib  [request:  [2],  reply-to:  Cg]J 

I 

cont 

I 

V 

E10:  Cc3  [reply:  1]]] 

I 

I 

cont 


V 

Eg:  |[fib  [request:  [1],  reply-to:  c40 

I 

cont 

I 

V 

Ells  Ie4  <*'*'  [reply:  1]]] 

I 

I 

— cont 


V V 

E12:  C + [request:  [1  1],  reply-to:  Cj]J 

I 

cont 

I 

V 

E4:  |[cj  <~~  [reply:  2]J 


Thus  we  see  that  0 in  turn  has  sub-activities  7’  and  6 such  that 


7':  {|(fib  <=  [2])  — > 1|1  start(7’)  = Eg  finish(7')  = E10 

6’i  {|(fib  <=  [1])  — > 1|}  start(i')  = Eg  fmi«h(5’)  = Ej j 

Notice  that  both  7 and  7’  both  satisfy  the  partial  description  {|ttib  <=  [2])  — > 1)}  even  though  they  are 
distinct  activities  which  share  no  events  in  common.  Uniquely  identifying  activities  has  the  same 
problems  as  uniquely  identifying  objects  and  events:  no  finite  local  description  will  serve  as  a unique 
identif  ication 
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An  actor  f will  be  said  to  behave  like  a procedure  if  the  following  conditions  hold  for  all  the  histories 
of  f: 

1:  All  of  the  messengers  of  events  in  the  history  are  either  of  the  form 

(£  ...  [request:  ...,  reply-to:  ...JJ  or  of  the' form  [...  [reply:]j. 

2:  If  E is  a request  of  the  form  |[  ...  [requett:  ...,  reply-to:  c]J  there  there  is  at  most  one 
event  E’  in  which  c is  the  target  of  E and  such  an  E’  must  be  a reply  to  E. 

3:  The  activities  of  f are  properly  nested.  I.E.  for  any  two  activities  of  t It  it  the  cate  that  either 
one  activity  is  a proper  subset  of  the  other  or  the  two  activities  are  disjoint. 

An  actor  f will  be  said  to  behave  like  a function  if  it  is  order  independent  and  behaves  like  a 

procedure 


X.2  — Limits  of  Continuous  Functionals 


The  actoi  model  of  computation  is  based  on  axiomatlzing  the  causal  and  Incidental  relations  among 
computational  events  The  Scott-Strachey  model  of  computation  is  based  on  the  mathematical  analysis 
of  continuous  function  spaces  Superficially  these  two  models  might  seem  to  have  little  in  common.  In 
this  section  we  will  analyze  the  relationship  between  these  models  of  computation.  Our  main  result  Is 
that  if  an  actor  behaves  like  a mathematical  function  then  it  is  the  limit  of  a continuous  functional  in 
thr  sense  of  Scott  This  result  follows  from  the  law  that  each  event  has  only  finitely  many  immediate 
successors,  in  the  continuation  ordering  and  the  law  of  finite  chains  between  two  events  in  the 
continuation  ordering. 

Once  again  we  will  make  the  discussion  concrete  by  considering  the  behavior  of  an  Implementation  of 
the  Fibonacci  function  defined  by  the  following  procedure: 

(fib  n)  = 

Uf 

(n  = 1)  r h.t  1 
(n  = 2 ) l fieri  1 

(n  > 2)  (fieri  ((fib  (n  - 1))  ♦ (fib  (n  - 2)))) 

Definition:  Suppose  an  actor  f behaves  like  a mathematical  function  and  that  <x  yXgraph(f)  and  <x*  y'Xgraphff). 
Then  <x’  y’>  will  be  said  to  be  an  immediate  t-descendant  of  <x  y>  if 
there  is  some  history  of  f whjch  has  events  E and  E’  of  th#  form 
E:  |[  f (requejl:  x,  reply-to:  ...]] 

E’:  [f  <~~  [requeue  x’,  reply-to:  ...]] 
such  that  E -oci->  E’ 

and  if  is  not  the  case  that  there  is  an  event  E of  the  form 
E:  [[  f [requeue  ...,  reply-to:  ...]] 
such  that  E -er»m->  E -eor»i->  E’ 
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For  example  <2  1>  is  an  immediate  fib-descendant  of  <3  2>. 

Definition:  Suppose  that  <x  yXgraph(f) 

immediate-descendantsf«x  y>)  = {<x’  y’>|  <x'  y’>  is  an  immediate  f-descendant  of  <x  y>} 

immediate-descendantsfjb(<l  1>)  = {} 
immediate-descendants(Uj(<2  1>)  = {} 
immediate-descendantsjj^(<3  2>)  = {<1  1>  <2  1>) 
immediate-descendantsfjb(<5  5>)  = {<3  2>  <4  3>} 

Lemma:  If  an  actor  f behaves  like  a mathematical  function  and  <x  yXgraph(f)  then 

immediate-descendantsf(<x  y>)  IS  finite. 

Proof:  Follows  from  the  Law  of  Finitely  Many  Immediate  Successors  in  the  Activation  Ordering. 

Definition:  If  G is  a set  of  input-output  pairs  then 

Dj(G)  = {<x  y>|  <x  yXgraph(f)  and  immediate-descendantsf(<x  y>)  c G} 

Intuitively  Dj(G)  is  the  set  of  all  input-output  pairs  of  graph(f)  that  can  be  computed  "immediately"  from 
the  input-output  pairs  in  G For  example  we  have  the  following  results  for  our  implementation  of  the 
f ibonacci  f unction 

D,lb({})  = {<1  1>  <2  1>} 

Df|b({<l  1>  <2  1>})  = {<1  1>  <2  1>  <3  2>} 

Df|b({<l  1>  <2  1>  <0  4>})  = {<1  1>  <2  1>  <3  2>} 

Dfib({<3  2>  <4  3>})  = {<1  1>  <2  1>  <5  5>} 

Lemma:  If  an  actor  < behaves  like  a mathematical  function,  then  Dj  is  a continuous  functional 

Proof:  From  its  definition  Dj  is  clearly  monotonic.  We  will  use  N to  denote  the  natural  numbers  [i.e.  the 
non-negative  integers].  Suppose  that  {Xj|  i«N}  is  a chain  of  sets  of  ordered  pairs  so  that  Xj  c Xj+1.  To 
prove  that  D(  is  continuous  we  shall  prove  that 


Ui<N  D,(Xj>  = D,fUj<N  Xj) 


Clearly 


Uj<N  S 0f(Uj<N  Xj) 

by  the  monotonicity  of  Dj  To  prove  the  set  inclusion  the  other  way  around  suppose 

<x,y>  < 0f(Uj<N  Xj) 


It  follows  from  the  definition  of  Dj  that  <x,yXgraph(f)  and 


imm*diai*-d«cc«ndantcf(<x,y>)  g Uj^  Xj 
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Therefore  there  exists  a natural  number  n such  that  immediate-descendantsf«x,y>)  c Xn  since  the 
immediate  f-descendants  of  <x,y>  are  finite.  Thus  <x,yXDf(Xn)  and 

<x,V>  « ui<N  Df<Xi> 


Definition:  A sequence  <x(  y(>  such  that  each  <Xj  yjXgraphU)  will  be  said  to  be  a descending  f-chain  if 
each  <Xj+1  yj+i>  ls  an  immediate  f-descendant  of  <Xj  yj>. 

Example:  The  following  are  descending  tib-chains 

[<6  8>  <4  3>  <3  2>  <1  1>] 
t<7  13>  <5  5>  <3  2>  <2  1>] 

Lemma:  If  <x  yXgraph(f)  then  there  are  only  finitely  many  descending  f-chains  begining  with  <x  y>. 

Proof:  Follows  from  the  fact  that  there  are  only  finitely  many  events  between  two  events  of  the  form 
IT  f <~~  [rrcjncst:  x,  rcply-to:  e]])  and  |[c  [reply:  y]J  in  the  continuation  ordering. 

Definition:  If  <x  y><graph«)  then  height(f,<x  y>)  will  be  defined  as  the  maximum  length  of  the  descending 
f-chains  beginning  with  <x  y>. 

Lemma:  If  <x  yXgraph(f)  then  <x  yXD(h®,sh^f><x  y>^({})  where  Djn  is  the  n-fold  composition  of  Df  with 

itself 

Theorem:  If  an  actor  f behaves  like  a mathematical  function  then  Df  is  a continuous  functional  in  the 
sense  of  Scott  and  graph(f)  is  the  limit  of  Df  beginning  with  the  empty  graph  {}  i.e. 

graph(f)  = Uj<N  D,'({}) 

where  graph(f)  is  the  set  of  input-output  pairs  of  f.  It  immediately  follows  that  graph(f)  is  the  minimal 
f ixed  point  of  Df  since 

graph(f)  = Df(graph(f)) 

The  above  theorem  makes  precise  the  physical  basis  for  believing  that  the  graph  of  every  physically 
realizable  mathematical  function  is  the  limit  of  a continuous  functional:  the  Law  of  Finitely  Many 
Immediate  Successors  and  the  Law  of  Finite  Chains  between  two  Events  in  the  Continuation  Ordering 
As  currently  developed  the  Scott-Strachey  theory  does  not  account  for  the  the  properties  of  the  arrival 
orderings  of  actors  such  as  synchronization  primitives  and  shared  data  bases.  An  interesting  topic  that 
is  left  open  for  future  research  is  how  the  Scott-Strachey  theory  can  be  extended  in  a natural  way  to 
encompass  the  physical  constraints  imposed  by  the  arrival  orderings  of  actors. 
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SECTION  XI  — FUTURE  WORK 

When  we  first  began  our  investigation  into  message-passing  system  we  developed  the  intuitively 
appealing  idea  of  "actors"  as  agents  which  communicate  by  passing  messages  This  intuitive  notion 
proved  to  be  too  naive  a basis  for  precise  technical  work  in  the  same  way  that  the  intuitive  notion  of  a 
"set"  as  a collection  of  objects  proved  to  be  too  naive  a basis  in  mathematics.  The  solution  has  been  the 
development  of  the  axioms  in  this  paper  which  are  intended  to  serve  as  the  first  step  in  developing 
axioms  which  capture  the  intuitive  notion  of  actors  as  agents  which  communicate  by  sending  and 
receiving  messages 

There  remains  a great  deal  of  work  to  be  done  in  the  development  of  the  theory  presented  in  this 
paper.  The  "completeness"  of  the  axioms  presented  here  needs  to  be  intensively  studied  to  determine  if 
they  can  be  significantly  strengthened 

A mathematical  characterization  of  the  models  which  satisfy  the  axioms  needs  to  be  developed.  The 
characterization  should  include  a description  of  a standard  model  obtained  by  a constructive  method  for 
enumerating  all  the  computation  histories  of  a system  that  satisfy  the  axioms  in  this  paper.  Eliot  Moss 
and  Henry  Baker  [50]  have  developed  one  such  model  which  proves  the  consistency  of  the  axioms  in 
this  paper  as  well  as  providing  a standard  model  in  which  the  axioms  can  be  interpreted. 

We  would  like  to  apply  the  semantic  theory  developed  in  this  paper  in  several  directions.  The 
semantics  of  programming  languages  for  multi  processing  problem  solving  languages  such  as  KRL, 
OWL,  PLASMA,  SIMULA,  SMALLTALK,  AMORD,  and  the  quantificational  calculus  need  to  be 
rigorously  developed  In  this  way  we  hope  to  be  able  to  make  precise  technical  contributions  to  the 
"declarative-procedural"  controversy. 

There  are  a number  of  questions  concerned  with  how  efficiently  actor  systems  can  be  implemented  on 
networks  of  machines.  In  terms  of  the  physical  transport  of  information  there  are  several  ways  in 
which  an  event  can  be  implemented.  The  information  in  the  messenger  can  be  physically  transported  to 
the  target,  the  target  can  be  transported  to  the  messenger,  or  the  two  can  rendezvous  at  some  other 
location  Under  differing  circumstances  any  one  of  the  above  possibilities  might  be  more  efficient.  For 
example  if  the  target  is  a small  function  which  makes  use  of  a large  number  of  the  extended 
acquaintances  of  the  messenger  then  it  is  probably  more  efficient  to  transport  the  target  to  the 
messenger  On  the  other  hand  if  the  target  is  a large  data  base  which  is  searched  according  to  the 
directions  of  a small  query  in  the  messenger,  then  it  is  probably  more  efficient  to  transport  the 
messenger  to  the  target.  Research  is  needed  to  develop  dynamic  mechanisms  for  deciding  what 
information  to  transport  for  computations  that  are  physically  distributed  on  a network  of  machines. 
Hopefully  some  general  mechanisms  can  be  developed  which,  in  practice,  yield  acceptable  efficiency. 
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SECTION  XII  — CONCLUSION 


In  this  paper  we  have  presented  some  laws  that  must  be  obeyed  by  the  computations  of  communicating 
paiallel  processes.  These  laws  are  expressed  in  the  language  of  first  order  set  theory.  The  actor  message 
passing  model  is  based  on  axiomatizing  the  causal  and  incidental  relations  between  computational 
events  where  each  event  consists  of  receiving  a message  An  important  advantage  of  the  actor 
message-passing  model  is  that  specifications  for  actors  can  be  expressed  directly  in  terms  of  the  events 
involving  those  actors.  Our  approach  is  different  from  the  more  usual  one  which  is  to  postulate  the 
existence  and  "fairness"  of  some  underlying  global  "scheduler"  [21]  or  "oracle"  [22].  Partial  orders 
provide  a means  for  concentrating  on  the  causal  relations  among  event  as  opposed  to  time  relationships 
that  result  from  some  arbitrary  interleaving. 

The  development  of  histories  in  the  actor  model  of  computation  as  partial  orders  of  events  as  a 
generalization  of  the  previous  development  as  sequences  of  events  has  proven  to  be  very  fruitful  The 
paitial  orders  -nri->,  -nrr->%  for  each  order  dependent  actor  x,  ~cont->,  and  — >,  are  all  physically  well 
grounded  in  the  sense  that  if  two  events  are  observed  to  be  related  in  a certain  way  in  some  observation 
f tame  then  they  will  be  observed  to  be  related  in  the  same  way  in  all  observation  frames.  Each  of  these 
different  oi derings  serves  its  own  purpose  in  the  model.  The  following  table  summarizes  the  partial 
orders  which  we  have  introduced  to  describe  the  histories  of  computations: 


-nrl-> 

-nrr->x 

—> 

-ronl-> 


activation 

arrival 

combined 

continuation 


causality  between  events 
local  time  of  arrival  of  messages  sent  to  x 
general  notion  of  one  event  preceding  enother 
nested  activities 


Partial  orders  of  histories  have  been  used  to  develop  specification  and  proof  techniques  for  modular 
synchronization  primitives  [32,34]-  The  machinery  of  partial  orders  of  events  provides  the  semantic 
glue  needed  to  relate  the  specifications  and  implementations  of  communicating  parallel  processes 

This  paper  has  traced  some  of  the  important  relationships  between  the  actor  message-passing  model  of 
computation  and  classical  denotational,  semantics.  It  has  been  proved  that  every  actor  which  behaves 
like  a mathematical  function  is  the  limit  of  a continuous  functional.  This  result  provides  a physical 
i.  sis  for  the  treatment  of  continuity  in  the  Scott-.Strachey  theory  of  computation  The  actor 
message-passing  model  has  important  applications  for  the  semantics  of  communicating  parallel  processes 
which  will  be  explored  in  subsequent  papers. 
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